Attorney Docket No, T2 146-906833 

Amendments to the Claims : 

This Hsting of claims will replace all prior versions and listings of claims in the 
application. 

Claims 1-19 (Cancelled) 

20. (Currently Amended) A method for protecting the processing of sensitive 
information in a security module having a monolithic structure, information processing 
means (31) and storage means distinct from said processing means for storing (32,33) 
information capable of being processed by said processing means, comprising the following 
steps: 

[[-]] selecting a piece of sensitive information stored in the storage means; 

[[-]] determining a specific condition for the integrity of said selected information; 

[[-]] reading the -said information and transmitting j4- said information to the 
processing means for processing; 

[[-]] processing the- said information and verifying during processing that the specific 
condition is satisfied; and 

[[-]] disabling processing of the -said information if the specific condition is not 
satisfied. 

21. (Currently Amended) The method according to claim 20, wherein the-said 
information is an operation code read in the storage means (32, 33) , the operation code being 
contained in a table having a content determined during the manufacture of the security 
module, and the specific condition for the integrity of the information being the value of the 
information is equal to one of several set values. 

22. (Previously Presented) The method according to claim 21, wherein the operation 
code to be processed is coded in the form of data bits and said bits do not all have the same 
binary value. 

23. (Cmrently Amended) The method according to claim 20, wherein the specific 
step of determining the condition for the integrity of said information comprises checking a 



9255103 



2 



Attorney Docket No. T2146-906833 



calculated or first piece of integrity data using fee -said information read in the storage means 
(32, 33) during the reading of fee- said information and transmitting the first piece of integrity 
data to the processing means, and calculating a second piece of integrity data by the 
processing means from fee -said information received and checking for equality between the 
first and second pieces of integrity data. 

24. (Previously Presented) The method according to claim 23, wherein the first piece 
of integrity data is calculated from at least one piece of calculation data whose value varies as 
a function of time. 

25. (Previously Presented) The method according to claim 23, wherein the first piece 
of integrity data is calculated from at least one piece of calculation data whose value varies 
randomly. 

26. (Currently Amended) The method according to claim 20, wherein the disabling 
of the processing of fee -said information is performed by a microprogrammed instruction. 

27. (Currently Amended) The method according to claim 26, wherein the 
microprogrammed instruction performs the following steps: 

[[-]] writing a piece of disable data into a nonvolatile location of the storage means 
(32, 33) ; and 

[[-]] disabling the processing of fee- said information. 

28. (Currently Amended) The method according to claim 27 fiirther comprising 
reading by the processing means (31) a nonvolatile location of the storage means (32, 33) 
upon power up of said module and disabling the module if a value read at this location does 
not match. 

29. (Currently Amended) A security module "comprising an electronic circuit having 
a monolithic structure and comprising information processing means (31) and information 
storage means (32, 33) distinct from said processing means , moano for extracting infomiation 
from th e storag e moans and means for selecting in said storage means information to be 
processed and means for extracting selected information from the storage means, said 
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extractiniJ means transmitting said selected infomiation to processing means , the processing 
means further comprising means for verifying a specific integrity condition of a piece of 
sensitive information, and means for disabling the processing of the information, said means 
for disabling being activated when the means for verification have detected that the specific 
condition is not satisfied. 

30. (Currently Amended) A security module according to claim 29, wherein the 
processing means {34^execute instructions corresponding to operation codes extracted from a 
table, characterized in that wherein the table comprises a forbidden instruction value. 

3L (Previously Presented) A security module according to claim 30, wherein the 
operation code to be processed is coded in the form of data bits, the security module 
comprising a means for reading the values of all the bits and a disabling means activated 
when the values of the bits are all identical. 

32. (Currently Amended) A security module according to claim 29, wherein the 
processing means (34^execute instructions corresponding to operation codes extracted from a 
table, the security module comprising a means for reading an operation code and a disabling 
means activated during the reading of a forbidden operation code. 

33. (Currently Amended) A security module according to claim 32, wherein the 
disabling means comprise a means for irreversibly writing an indicator into the storage means 
(32, 33) , and a means for reading said indicator during the next power-up of the module. 

34. (Currently Amended) A security module according to claim 29, comprising 
parity generators f7rS)-cooperating with the storage means, parity generators {iA^ 
cooperating with the processing means, and a comparator connected to each of the parity 
generators and capable of inducing an interrupt in the processing means. 

35. (Currently Amended) A security module according to claim 34, wherein the 
operation of the parity generators (7, 8) varies as a function of time. 

36. (Currently Amended) A security module according to claim 34, wherein the 
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operation of the parity generators (7, 8) varies randomly. 

37. (Currently Amended) A security module according to claim 33, charact e riz e d in 
that- wherein the irreversible writing of the indicator into the storage means (32, 33) is 
performed by executing a microprogrammed instruction. 

38. (Currently Amended) A security module according to claim 29, charactorizod in 
tha ^wherein the security module is a microcircuit card. 
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